Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
MicrosoftSql Server

231 matches found

CVE
CVE•added 2024/04/09 5:15 p.m.•225 views

CVE-2024-28937

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01629EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•223 views

CVE-2024-37334

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.08083EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•221 views

CVE-2024-29045

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

7.5CVSS8AI score0.01251EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•216 views

CVE-2024-28933

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01297EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•215 views

CVE-2024-28914

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01643EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•210 views

CVE-2024-28936

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01297EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•209 views

CVE-2024-28941

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01629EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•205 views

CVE-2024-28915

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2014/08/12 9:55 p.m.•202 views

CVE-2014-4061

Microsoft SQL Server 2008 SP3, 2008 R2 SP2, and 2012 SP1 does not properly control use of stack memory for processing of T-SQL batch commands, which allows remote authenticated users to cause a denial of service (daemon hang) via a crafted T-SQL statement, aka "Microsoft SQL Server Stack Overrun Vu...

6.8CVSS6.6AI score0.33911EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•199 views

CVE-2024-28913

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01643EPSS
CVE
CVE•added 2016/11/10 7:0 a.m.•195 views

CVE-2016-7254

Microsoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified pointer, which allows remote authenticated users to gain privileges via unknown vectors, aka "SQL RDBMS Engine Elevation of Privilege Vulnerability."

8.8CVSS8.6AI score0.16567EPSS
CVE
CVE•added 2024/04/09 5:16 p.m.•191 views

CVE-2024-29984

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•187 views

CVE-2024-28944

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01944EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•186 views

CVE-2024-28940

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01643EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•184 views

CVE-2024-29044

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01643EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•180 views

CVE-2024-28934

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01629EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•177 views

CVE-2024-28926

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01643EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•177 views

CVE-2024-29043

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02197EPSS
CVE
CVE•added 2024/09/10 5:15 p.m.•171 views

CVE-2024-26186

Microsoft SQL Server Native Scoring Remote Code Execution Vulnerability

8.8CVSS8.9AI score0.11235EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•170 views

CVE-2024-28908

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01643EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•170 views

CVE-2024-28939

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.00967EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•168 views

CVE-2024-28909

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01643EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•167 views

CVE-2024-28927

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01643EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•166 views

CVE-2024-28938

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01629EPSS
CVE
CVE•added 2024/04/09 5:16 p.m.•165 views

CVE-2024-29982

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02216EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•164 views

CVE-2024-28932

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.02197EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•162 views

CVE-2024-29046

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01643EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•161 views

CVE-2024-28935

Microsoft ODBC Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01629EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•160 views

CVE-2024-28942

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01767EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•159 views

CVE-2024-28910

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01906EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•159 views

CVE-2024-28912

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01643EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•154 views

CVE-2024-20701

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.07952EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•154 views

CVE-2024-21303

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.07952EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•154 views

CVE-2024-28945

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01308EPSS
CVE
CVE•added 2024/04/09 5:15 p.m.•153 views

CVE-2024-29047

Microsoft OLE DB Driver for SQL Server Remote Code Execution Vulnerability

8.8CVSS9AI score0.01643EPSS
CVE
CVE•added 2011/06/16 8:55 p.m.•150 views

CVE-2011-1280

The XML Editor in Microsoft InfoPath 2007 SP2 and 2010; SQL Server 2005 SP3 and SP4 and 2008 SP1, SP2, and R2; SQL Server Management Studio Express (SSMSE) 2005; and Visual Studio 2005 SP1, 2008 SP1, and 2010 does not properly handle external entities, which allows remote attackers to read arbitrar...

4.3CVSS7AI score0.33585EPSS
CVE
CVE•added 2004/09/01 4:0 a.m.•149 views

CVE-2002-1123

Buffer overflow in the authentication function for Microsoft SQL Server 2000 and Microsoft Desktop Engine (MSDE) 2000 allows remote attackers to execute arbitrary code via a long request to TCP port 1433, aka the "Hello" overflow.

7.5CVSS8AI score0.89144EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•148 views

CVE-2024-37336

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.085EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•143 views

CVE-2024-38087

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.1024EPSS
CVE
CVE•added 2009/10/14 10:30 a.m.•133 views

CVE-2009-2528

GDI+ in Microsoft Office XP SP3 does not properly handle malformed objects in Office Art Property Tables, which allows remote attackers to execute arbitrary code via a crafted Office document that triggers memory corruption, aka "Memory Corruption Vulnerability."

9.3CVSS7.2AI score0.43234EPSS
CVE
CVE•added 2008/12/10 2:0 p.m.•130 views

CVE-2008-5416

Heap-based buffer overflow in Microsoft SQL Server 2000 SP4, 8.00.2050, 8.00.2039, and earlier; SQL Server 2000 Desktop Engine (MSDE 2000) SP4; SQL Server 2005 SP2 and 9.00.1399.06; SQL Server 2000 Desktop Engine (WMSDE) on Windows Server 2003 SP1 and SP2; and Windows Internal Database (WYukon) SP2...

9CVSS7.8AI score0.89069EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•121 views

CVE-2024-37331

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.07952EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•121 views

CVE-2024-37332

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.10421EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•120 views

CVE-2024-37323

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.06444EPSS
CVE
CVE•added 2009/10/14 10:30 a.m.•119 views

CVE-2009-2500

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office ...

9.3CVSS7.9AI score0.54154EPSS
CVE
CVE•added 2009/10/14 10:30 a.m.•119 views

CVE-2009-3126

Integer overflow in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Office XP SP3, Office 2003 SP3, 2007 Microsoft Office System SP1 and SP2, Office Project 2002 SP1, Visio 2002 SP2, Office Word Viewer, Word Viewer 2003 Gold and SP3, Office Excel Viewer 2003 Gold and SP3, Office ...

9.3CVSS9.7AI score0.48214EPSS
CVE
CVE•added 2024/11/12 6:15 p.m.•116 views

CVE-2024-49021

Microsoft SQL Server Remote Code Execution Vulnerability

7.8CVSS8AI score0.00357EPSS
CVE
CVE•added 2002/07/23 4:0 a.m.•115 views

CVE-2002-0643

The installation of Microsoft Data Engine 1.0 (MSDE 1.0), and Microsoft SQL Server 2000 creates setup.iss files with insecure permissions and does not delete them after installation, which allows local users to obtain sensitive data, including weakly encrypted passwords, to gain privileges, aka "SQ...

4.6CVSS6.8AI score0.00815EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•115 views

CVE-2024-37319

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.10421EPSS
CVE
CVE•added 2024/07/09 5:15 p.m.•115 views

CVE-2024-37330

SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability

8.8CVSS9AI score0.07952EPSS
Total number of security vulnerabilities231